From 85c2be5713eac244ffbe7a024ed2aa08b9816388 Mon Sep 17 00:00:00 2001
From: Torsten Grote <t@grobox.de>
Date: Fri, 11 Sep 2020 10:09:01 -0300
Subject: [wallet] verify wallet-core with SHA256

---
 wallet/build.gradle | 15 +++++++++++----
 1 file changed, 11 insertions(+), 4 deletions(-)

(limited to 'wallet/build.gradle')

diff --git a/wallet/build.gradle b/wallet/build.gradle
index 79c24f3..b5720be 100644
--- a/wallet/build.gradle
+++ b/wallet/build.gradle
@@ -24,6 +24,7 @@ plugins {
 }
 
 def walletCoreVersion = "v0.8.0-rc.2"
+def walletCoreSha256 = "838035331c6103e2a0e911d2a0c6f0e9af92ddd77e8091d11fb4a246486edd22"
 
 static def versionCodeEpoch() {
     return (new Date().getTime() / 1000).toInteger()
@@ -47,7 +48,7 @@ android {
         minSdkVersion 24
         targetSdkVersion 29
         versionCode 8
-        versionName "v0.8.0-rc.2"
+        versionName "v0.8.0-rc.3"
         testInstrumentationRunner "androidx.test.runner.AndroidJUnitRunner"
         buildConfigField "String", "WALLET_CORE_VERSION", "\"$walletCoreVersion\""
     }
@@ -145,9 +146,10 @@ dependencies {
 }
 
 def walletLibraryDir = "src/main/assets"
-task downloadWalletLibrary(type: Download) {
+def walletDestFile = "${walletLibraryDir}/taler-wallet-android-${walletCoreVersion}.js"
+task downloadWalletLibrary(type: Download, dependsOn: preBuild) {
     src "https://git.taler.net/wallet-core.git/plain/${walletCoreVersion}/taler-wallet-android.js?h=prebuilt"
-    dest "${walletLibraryDir}/taler-wallet-android-${walletCoreVersion}.js"
+    dest walletDestFile
     onlyIfModified true
     overwrite false
     doFirst {
@@ -159,7 +161,12 @@ task downloadWalletLibrary(type: Download) {
         }
     }
 }
+task verifyWalletLibrary(type: Verify, dependsOn: downloadWalletLibrary) {
+    src walletDestFile
+    algorithm 'SHA-256'
+    checksum walletCoreSha256
+}
 tasks.withType(MergeResources) {
     inputs.dir walletLibraryDir
-    dependsOn downloadWalletLibrary
+    dependsOn verifyWalletLibrary
 }
-- 
cgit v1.2.3